Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/HXMlv9NxuKboyUtKNMBCZQbSjW0.roa
File: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (raw, json)
Hash identifier: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=
Subject key identifier: 1D:73:25:BF:D3:71:B8:A6:E8:C9:4B:4A:34:C0:42:65:06:D2:8D:6D
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 019422FBECCF6E04CEC069B0D9FE7439948C
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/HXMlv9NxuKboyUtKNMBCZQbSjW0.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.156.16.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ec:cf:6e:04:ce:c0:69:b0:d9:fe:74:39:94:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d7325bfd371b8a6e8c94b4a34c0426506d28d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:11:c1:30:5d:45:08:ff:ff:d8:b4:9b:9f:
1d:7a:1d:c0:6c:cb:61:b9:3a:ae:87:d4:01:98:a0:
94:9c:a2:33:eb:e8:78:61:88:d0:58:70:ae:7b:9f:
bd:89:6e:01:00:ab:86:8f:38:a2:a4:db:f1:53:58:
8e:33:c8:4e:5b:6e:0e:c1:63:a7:2b:90:35:5a:ae:
36:35:68:e9:a4:ab:a0:e6:d4:a8:db:a4:82:04:12:
4b:0f:d5:df:2a:00:50:bd:fc:12:9a:e9:b0:ea:f4:
fe:a4:3a:6a:ae:c9:1f:8e:a9:6c:07:aa:1f:c2:5f:
dc:4f:2b:c7:8d:b6:f7:ae:5a:1b:3f:1c:07:45:ba:
74:a0:63:22:83:94:2b:44:b6:21:3b:33:57:f1:d0:
38:87:ce:fb:3d:46:7c:25:74:0c:60:3c:b1:3e:c8:
e9:56:62:31:d0:28:23:73:3f:43:01:02:f3:40:16:
b4:8e:3f:a5:c8:80:6c:c7:85:c7:8d:43:40:5d:92:
db:36:04:f1:dd:f8:29:6a:06:11:9e:8a:f6:c9:c2:
04:98:65:8e:d0:a8:7b:33:04:35:89:c3:a9:a5:22:
f3:19:d5:58:f3:df:75:41:bf:c0:3a:98:b1:b7:75:
b9:bc:98:04:ff:21:79:93:3c:78:1c:bb:af:c9:ba:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:73:25:BF:D3:71:B8:A6:E8:C9:4B:4A:34:C0:42:65:06:D2:8D:6D
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/HXMlv9NxuKboyUtKNMBCZQbSjW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.16.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:a6:3b:6b:00:e7:c8:18:a1:01:93:f5:ec:94:7f:15:88:83:
52:f2:3a:03:f6:4c:f6:63:a3:48:eb:6b:30:49:27:02:85:94:
e4:7f:1b:aa:a8:0d:71:9c:6b:41:4d:c1:15:be:95:c3:53:6e:
96:99:d6:6f:ca:7f:6e:89:b1:4a:fc:6f:bd:ca:74:c8:7f:0d:
b0:1b:7e:d0:da:3a:45:0c:ec:09:49:c0:48:25:c1:35:02:75:
50:eb:46:16:d9:15:78:09:1d:08:4c:21:1a:a0:af:d3:d4:cc:
9e:04:30:60:79:c8:da:4a:e5:6f:a8:9e:63:a9:f5:3c:65:80:
fc:33:59:cb:64:b9:2e:57:be:cf:82:1e:40:e8:96:d2:6f:a5:
3d:ed:2c:be:5f:c5:9b:ea:64:00:37:87:af:20:40:a6:9d:94:
81:d1:84:db:6c:fb:b7:08:0d:b8:da:08:43:88:eb:8f:a7:88:
89:68:7f:50:34:99:af:78:b3:a1:fa:0b:8a:ca:5b:ec:ec:25:
11:a1:8e:f7:c6:ae:dd:d4:e0:de:2c:af:fb:d2:16:d2:2f:fd:
b3:97:1f:dc:a7:b1:64:56:d2:47:00:8e:28:20:3c:66:a5:30:
61:7b:4b:bc:4d:7b:9b:4e:d0:1a:e4:33:1c:04:f7:81:ef:93:
da:b7:df:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:25 2025 by rpki-client